Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
7
Disclosed reports
0
Subdomains
267
Vendor on CyberSIXT
Shein (1 CVE, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains267

Subdomains of SHEIN
NameScopeFirst seen
tracking.news.pl.shein.comIn scope2026-11-14
playback.shein.comIn scope2026-11-14
www.playback.shein.comIn scope2026-11-14
preferences.shein.comIn scope2026-11-14
privatelift.shein.comIn scope2026-11-14
pt.shein.comIn scope2026-11-14
pubkey.shein.comIn scope2026-11-14
return.shein.comIn scope2026-11-14
ro.shein.comIn scope2026-11-14
roe.shein.comIn scope2026-11-14
tracking.news.roe.shein.comIn scope2026-11-14
ru.shein.comIn scope2026-11-14
s1.shein.comIn scope2026-11-14
se.shein.comIn scope2026-11-14
security.shein.comIn scope2026-11-14
seller-br.shein.comIn scope2026-11-14
seller-eu.shein.comIn scope2026-11-14
seller-us.shein.comIn scope2026-11-14
articles.seller-us.shein.comIn scope2026-11-14
blog.seller-us.shein.comIn scope2026-11-14
case-studies.seller-us.shein.comIn scope2026-11-14
events.seller-us.shein.comIn scope2026-11-14
partner.seller-us.shein.comIn scope2026-11-14
webinars.seller-us.shein.comIn scope2026-11-14
sellerhub.shein.comIn scope2026-11-14
service.shein.comIn scope2026-11-14
sg.shein.comIn scope2026-11-14
tracking.news.sg.shein.comIn scope2026-11-14
tracking-us.news.sg.shein.comIn scope2026-11-14
shop.shein.comIn scope2026-11-14
sqs.shein.comIn scope2026-11-14
th.shein.comIn scope2026-11-14
tracking.news.th.shein.comIn scope2026-11-14
tracking-us.news.th.shein.comIn scope2026-11-14
tr.shein.comIn scope2026-11-14
u003ees.shein.comIn scope2026-11-14
u003eru.shein.comIn scope2026-11-14
uk.shein.comIn scope2026-11-14
us.shein.comIn scope2026-11-14
www.us.shein.comIn scope2026-11-14
usvpn.shein.comIn scope2026-11-14
tracking.news.vn.shein.comIn scope2026-11-14
tracking-us.news.vn.shein.comIn scope2026-11-14
vpn.shein.comvpnIn scope2026-11-14
www.shein.comIn scope2026-11-14
tracking.news.www.shein.comIn scope2026-11-14
tracking-us.news.www.shein.comIn scope2026-11-14
za.shein.comIn scope2026-11-14
zpnv.shein.comIn scope2026-11-14
m.shein.com.hkNot in the scope2026-11-14
www.shein.com.hkNot in the scope2026-11-14
link2-news.shein.com.mxNot in the scope2026-11-14
m.shein.com.mxNot in the scope2026-11-14
onelink.shein.com.mxNot in the scope2026-11-14
www.shein.com.mxNot in the scope2026-11-14
m.shein.com.vnNot in the scope2026-11-14
onelink.shein.com.vnNot in the scope2026-11-14
www.shein.com.vnNot in the scope2026-11-14
m.shein.inNot in the scope2026-11-14
www.shein.inNot in the scope2026-11-14
app.shein.seNot in the scope2026-11-14
m.shein.seNot in the scope2026-11-14
onelink.shein.seNot in the scope2026-11-14
www.shein.seNot in the scope2026-11-14

241 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.